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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 6/14/2007 has been entered. 

Response to Arguments 

2. In communications filed on 6/14/2007, applicant amends claims 16, 33, 34, 40, 41, and 
47. The following claims 16-20, 22-36, 38-43, and 45-47 are presented for examination. 

2. 1 Applicant's remarks, filed on 6/14/2007, with respect to the rejection of claim 1 6 have 
been fully considered but they are moot in view of a new ground of rejection. Claim 3 1 is 
dependent on claim 16 and therefore the arguments presented by applicant concerning claim 31 
in view of dependency to claim 16 is also moot. The rejection of the dependent claims not 
argued by Applicant can still be applied in this Office action. 



Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 

Claims 16-20, 22, 25, 28-36, 38-43, and 45-47 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over US Patent 4,752,678 to Rikuna in view of US Patent 5,917,168 to 
Nakamura et al. 

As per claim 16, Rikuna substantially discloses a method for controlling card holder 
verification comprising: determining/checking presence of a trusted association between the 
terminal 12 and the card 1 1 by comparing a first identifier (i.e. PAN primary account number) 
stored in card 21 by the comparison section 63 with identifiers stored in terminal 12 (see column 
8, lines 5-27) that meets the recitation of checking the presence of a trusted association between 
at least one device and a card usable with the at least one device, wherein the checking 
comprises comparing by one of the card and the at least one device a first identifier stored on the 
card with one or more identifiers stored in the at least one device a first identifier stored on the 
card with one or more identifiers stored in the at least one device. Rikuna discloses when the 
first identifiers coincide (i.e. card is valid), performing cardholder verification separate from the 
comparing above (see column 8, lines 24-30) that meets the recitation of (if the checking 
indicates the presence of the trusted association then performing card holder verification 
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separate from the comparing); Rikuna further discloses cardholder verification is performed 
separate from the first comparing above by comparing the PIN using the card (comparison 
section 40) and without involving a holder of the card by providing the PIN from the terminal 12 
to the card and for comparing by the card to the PIN stored in the card that is different from the 
PAN (first identifier) (see column 8, lines 38-45) that meets the recitation of performing card 
holder verification separate from the comparing using the card and without involving a holder of 
the card by providing another identifier to the card from the at least one device for comparing by 
the card to a second identifier stored on the card that is different from the first identifier; 
Rikuna also discloses if there is indication that an identifier is not transferred to the terminal 
(which could be interpreted as no trusted association) then involving the cardholder in 
performing cardholder verification by directly key inputs the PIN data by the card as in step B15 
(see column 9, lines 26-37 and column 8 5 lines 38-45) that meets the recitation of otherwise, then 
involving the holder of the card in performing card holder verification by the card. Rikuna 
suggests different scenarios in verifying the holder of the card by the card when authentication 
fails (see column 9, lines 25-67) but is silent about performing the verification when the checking 
indicates no trusted association (i.e. card invalid). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method of Rikuna to 
add the feedback mechanism disclosed by Rikuna of verifying the cardholder in case of any 
authentication failure due to the card, the terminal, and the account itself (including trusted 
association) for the predictable result of ensuring that the holder of the card is authentic as 
suggested by Rikuna . 
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Nakamura et al in an analogous art discloses automatic debit operation without PIN 
entry (see column 5, line 39 through column 6, line 7) and further discloses another option is to 
require PIN entry only when the amount of the transaction exceeds a preselected floor limit (see 
column 6, lines 1 1-24) that meets the recitation of if the checking indicates no trusted association 
then involving the holder of the card in performing card holder verification by the card. 
Nakamura et al adds a mutual authentication then would prevent use of a fraudulent issued card 
and use of unauthorized terminal (see column 6, lines 1 1-24). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify the 
method of Rikuna to involve the holder of the card in performing card holder verification if the 
checking indicates no trusted association because one of ordinary skill in the art would have 
recognized the advantages that doing so would prevent use of a fraudulent issued card to 
complete a transaction and use of unauthorized terminal as suggested by Nakamura et al. 

As per claim 17, the references as combined above disclose the claimed method of claim 
16. Rikuna discloses wherein the at least one device is located in a trusted environment (see 
column 3, lines 15-23). 

As per claim 18, the references as combined above disclose the claimed method of claim 
16. Rikuna discloses wherein the card comprises a chipcard (see column 1, lines 25-30). 

As per claim 19, the references as combined above disclose the claimed method of claim 
16. Rikuna discloses wherein the performing card holder verification without involving a holder 



Application/Control Number: 09/73 1 ,509 Page 6 

Art Unit: 2136 

of the card comprises performing card holder verification hidden from the holder of the card (see 
column 8 5 lines 38-45). 

As per claim 20, the references as combined above disclose the claimed method of claim 
19. Rikuna discloses wherein the performing card holder verification hidden from the holder of 
the card comprises automatically obtaining a personal identification number of the holder of the 
card and verifying the personal identification number without intervention of the holder of the 
card (see column 8, lines 38-45). 

As per claim 22, the references as combined above disclose the claimed method of claim 
16. Rikuna discloses wherein the comparing comprises comparing a card identifier stored on 
the card with one or more card identifiers stored in the device (see column 8, lines 5-27). 

As per claim 25, the references as combined above disclose the claimed method of claim 
16. Rikuna discloses a card storing attribute data including account number, merchant 
identification code and terminal identification code (device identifier) (see column 4, lines 21- 
26) and disclose an exemplary embodiment for checking some of the attribute data such as 
account number, merchant identification code (see column 7, line 40 through column 9, line 23). 
Rikuna is silent about checking terminal identification code meaning comparing an identifier of 
the device with one or more device identifiers stored on the card. However, it would only 
require routine skill in the art and design choice to reproduce the process disclosed by Rikuna of 
comparing the other attribute data or identifiers such as account number, merchant identification 
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code, PIN, etc. and use it to compare the terminal identification code (device identifier). One of 
ordinary skill in the art would have recognized the advantage of comparing terminal 
identification code so as to determine if the IC card terminal is authorized or not as suggested by 
Rikuna (see column 1, lines 34-36) and as suggested by Nakamura et al who discloses mutual 
authentication for preventing use of unauthorized terminal (see column 6, lines 1 1-24). 

As per claim 28, the references as combined above disclose the claimed method of claim 
16, Rikuna discloses wherein the performing card holder verification without involving a holder 
of the card comprises automatically obtaining a personal identification number of the holder of 
the card and verifying the personal identification number without requesting information from 
the holder of the card (see column 8, lines 5-27) and wherein the involving the holder of the card 
comprises requesting the holder of the card to enter the personal identification number (see 
column 3, lines 21-31). 

As per claim 29, the references as combined above disclose further comprising 
associating the at least one device and the card (see Rikuna, column 3, lines 15-23 and column 
7, lines 40-52). 

As per claim 30, the references as combined above disclose further comprising 
controlling the association between a device of the at least one device and the card (see Rikuna, 
column 3, lines 15-23 and column 7, lines 40-52). 
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As per claim 31, the references as combined above disclose wherein the controlling 
comprises using a network connectable to the device (see Nakamura et al, column 5, lines 40- 
52). 

As per claim 32, the references as combined above disclose the claimed method of claim 
16, wherein the checking is between at least one device and a plurality of cards and where in the 
performing card holder verification without involving a holder of the card is for a plurality of 
holders (see Rikuna, column 2, line 65 through column 3, line 12). 

As per claim 33, Rikuna substantially discloses a method for performing card holder 
verification said method comprising: determining/checking presence of a trusted association 
between the terminal 12 and the card 1 1 by comparing a first identifier (i.e. PAN primary 
account number) stored in card 21 by the comparison section 63 with identifiers stored in 
terminal 12 (see column 8, lines 5-27) that meets the recitation of checking the presence of a 
trusted association between at least one device and a card usable with the at least one device, 
wherein the checking comprises comparing by one of the card and the at least one device a first 
identifier stored on the card with one or more identifiers stored in the at least one device a first 
identifier stored on the card with one or more identifiers stored in the at least one device. 
Rikuna discloses when the first identifiers coincide (i.e. card is valid), performing cardholder 
verification separate from the comparing above (see column 8, lines 24-30) that meets the 
recitation of performing card holder verification by the card separate from and based on the 
checking. Rikuna further discloses cardholder verification is performed separate from the first 
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comparing above by comparing the PIN using the card (comparison section 40) and without 
involving a holder of the card by providing the PIN from the terminal 12 to the card and for 
comparing by the card to the PIN stored in the card that is different from the PAN (first 
identifier) (see column 8, lines 38-45) that meets the recitation of if the checking indicates the 
presence of the trusted association, then a personal identification number of the holder of the 
card different from the first identifier is automatically provided to the card from the at least one 
device and verified using the card without requesting information from the holder of the card, 
Rikuna also discloses if there is indication that an identifier is not transferred to the terminal 
(which could be interpreted as no trusted association) then involving the cardholder in 
performing cardholder verification by directly key inputs the PIN data by the card as in step Bl 5 
(see column 9, lines 26-37 and column 8, lines 38-45) that meets the recitation of otherwise, then 
the holder of the card is requested to enter the personal identification number to verify the 
holder of the card via the card comparing the personal identification numbered entered to a 
second identifier stored on the card. Rikuna suggests different scenarios in verifying the holder 
of the card by the card when authentication fails (see column 9, lines 25-67) but is silent about 
performing the verification when the checking indicates no trusted association (i.e. card invalid). 
It would have been obvious to one of ordinary skill in the art at the time the invention was made 
to modify the method of Rikuna to add the feedback mechanism disclosed by Rikuna of 
verifying the cardholder in case of any authentication failure due to the card, the terminal, and 
the account itself (including trusted association) for the predictable result of ensuring that the 
holder of the card is authentic as suggested by Rikuna. 
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Nakamura et al in an analogous art discloses automatic debit operation without PIN 
entry (see column 5, line 39 through column 6, line 7) and further discloses another option is to 
require PIN entry only when the amount of the transaction exceeds a preselected floor limit (see 
column 6, lines 1 1-24) that meets the recitation of if the checking indicates no trusted association 
then involving the holder of the card in performing card holder verification by the card, 
Nakamura et al adds a mutual authentication then would prevent use of a fraudulent issued card 
and use of unauthorized terminal (see column 6, lines 1 1-24). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify the 
method of Rikuna to involve the holder of the card in performing card holder verification if the 
checking indicates no trusted association because one of ordinary skill in the art would have 
recognized the advantages that doing so would prevent use of a fraudulent issued card to 
complete a transaction and use of unauthorized terminal as suggested by Nakamura et al. 

As per claim 34, Rikuna substantially discloses a system for performing card holder 
verification said system comprising: determining/checking presence of a trusted association 
between the terminal 12 and the card 1 1 by comparing a first identifier (i.e. PAN primary 
account number) stored in card 21 by the comparison section 63 with identifiers stored in 
terminal 12 (see column 8, lines 5-27) that meets the recitation of means for checking the 
presence of a trusted association between at least one device and a card usable with the at least 
one device, wherein the means for checking comprises means for comparing by one of the card 
and the at least one device a first identifier stored on the card with one or more identifiers stored 
in the at least one device a first identifier stored on the card with one or more identifiers stored 
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in the at least one device. Rikuna discloses when the first identifiers coincide (i.e. card is valid), 
performing cardholder verification separate from the comparing above (see column 8, lines 24- 
30) that meets the recitation of means for performing card holder verification separate from the 
comparing using the card. Rikuna further discloses cardholder verification is performed 
separate from the first comparing above by comparing the PIN using the card (comparison 
section 40) and without involving a holder of the card by providing the PIN from the terminal 12 
to the card and for comparing by the card to the PIN stored in the card that is different from the 
PAN (first identifier) (see column 8, lines 38-45) that meets the recitation of means for 
performing card holder verification separate from the comparing using the card and without 
involving a holder of the card by providing another identifier to the card from the at least one 
device for comparing by the card to a second identifier stored on the card that is different from 
the first identifier if the checking indicates the presence of the trusted association; Rikuna also 
discloses if there is indication that an identifier is not transferred to the terminal (which could be 
interpreted as no trusted association) then involving the cardholder in performing cardholder 
verification by directly key inputs the PIN data by the card as in step B15 (see column 9, lines 
26-37 and column 8, lines 38-45) that meets the recitation of otherwise, then means for involving 
the holder of the card in performing card holder verification by the card. Rikuna suggests 
different scenarios in verifying the holder of the card by the card when authentication fails (see 
column 9, lines 25-67) but is silent about performing the verification when the checking 
indicates no trusted association (i.e. card invalid). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method of Rikuna to 
add the feedback mechanism disclosed by Rikuna of verifying the cardholder in case of any 
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authentication failure due to the card, the terminal, and the account itself (including trusted 
association) for the predictable result of ensuring that the holder of the card is authentic as 
suggested by Rikuna. 

Nakamura et al in an analogous art discloses automatic debit operation without PIN 
entry (see column 5 5 line 39 through column 6, line 7) and further discloses another option is to 
require PIN entry only when the amount of the transaction exceeds a preselected floor limit (see 
column 6, lines 1 1-24) that meets the recitation of if the checking indicates no trusted association 
then involving the holder of the card in performing card holder verification by the card. 
Nakamura et al adds a mutual authentication then would prevent use of a fraudulent issued card 
and use of unauthorized terminal (see column 6, lines 1 1-24). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify the 
method of Rikuna to involve the holder of the card in performing card holder verification if the 
checking indicates no trusted association because one of ordinary skill in the art would have 
recognized the advantages that doing so would prevent use of a fraudulent issued card to 
complete a transaction and use of unauthorized terminal as suggested by Nakamura et al. 

As per claim 35, the references as combined above disclose the claimed system of claim 
34, Rikuna discloses wherein the means for performing card holder verification without 
involving a holder of the card involvement comprises means for performing card holder 
verification hidden from the holder of the card (see column 8, lines 38-45). 
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As per claim 36, the references as combined above disclose the claimed system of claim 
35, wherein the means for performing card holder verification hidden from the holder of the card 
comprises means for automatically obtaining a personal identification number of the holder of 
the card and verifying the personal identification number without intervention of the holder of 
the card (see Rikuna, column 8, lines 38-45). 

As per claim 38, Rikuna discloses the claimed system of claim 34, wherein the means 
for comparing comprises means for comparing a card identifier stored on the card with one or 
more card identifiers stored in the device (see Rikuna, column 8, lines 5-27). 

As per claim 39, Rikuna discloses the claimed system of claim 34, wherein the means 
for comparing comprises (comparison section 40) that meets the recitation of means for 
comparing an identifier of the device with one or more device identifiers stored on the card (see 
column 2, lines 55-65 and column 3, lines 10-16). 

As per claim 40, Rikuna substantially discloses a system of performing card holder 
verification, said system comprising at least one processor (see figure 3) to perform card holder 
verification based on determining/checking presence of a trusted association between the 
terminal 12 and the card 1 1 by comparing a first identifier (i.e. PAN primary account number) 
stored in card 21 by the comparison section 63 with identifiers stored in terminal 12 (see column 
8, lines 5-27) that meets the recitation of at least one processor on the card to perform card 
holder verification based on whether a trusted association exists between at least one device and 
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a card usable with the at least one device, and to compare a first identifier stored on the card 
with one or more identifiers stored in the at least one device. Rikuna discloses when the first 
identifiers coincide (i.e. card valid) performing cardholder verification separate from the 
comparing above (see column 8 ? lines 24-30) that meets the recitation of (if the checking 
indicates the presence of the trusted association then performing card holder verification 
separate from the comparing); Rikuna further discloses cardholder verification is performed 
separate from the first comparing above by comparing the PIN using the card (comparison 
section 40) and without involving a holder of the card by providing the PIN from the terminal 1 2 
to the card and for comparing by the card to the PIN stored in the card that is different from the 
PAN (first identifier) (see column 8, lines 38-45) that meets the recitation of if the checking 
indicates the presence of the trusted association, then a personal identification number of the 
holder of the card different from the first identifier of the holder of the card is automatically 
provided to the card from the at least one device and verified separate from the compare using 
the card without requesting information from the holder of the card; Rikuna also discloses if 
there is indication that an identifier is not transferred to the terminal (which could be interpreted 
as no trusted association) then involving the cardholder in performing cardholder verification by 
directly key inputs the PIN data by the card as in step B15 (see column 9, lines 26-37 and 
column 8, lines 38-45) that meets the recitation of otherwise, then the holder of the card is 
requested to enter the personal identification number to verify the holder of the card via the card 
comparing the personal identification numbered entered to a second identifier stored on the 
card, Rikuna suggests different scenarios in verifying the holder of the card by the card when 
authentication fails (see column 9, lines 25-67) but is silent about performing the verification 
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when the checking indicates no trusted association (i.e. card invalid). It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify the 
method of Rikuna to add the feedback mechanism disclosed by Rikuna of verifying the 
cardholder in case of any authentication failure due to the card, the terminal, and the account 
itself (including trusted association) for the predictable result of ensuring that the holder of the 
card is authentic as suggested by Rikuna. 

Nakamura et al in an analogous art discloses automatic debit operation without PIN 
entry (see column 5, line 39 through column 6, line 7) and further discloses another option is to 
require PIN entry only when the amount of the transaction exceeds a preselected floor limit (see 
column 6, lines 1 1 -24) that meets the recitation of if the checking indicates no trusted association 
then involving the holder of the card in performing card holder verification by the card. 
Nakamura et al adds a mutual authentication then would prevent use of a fraudulent issued card 
and use of unauthorized terminal (see column 6, lines 1 1-24). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify the 
method of Rikuna to involve the holder of the card in performing card holder verification if the 
checking indicates no trusted association because one of ordinary skill in the art would have 
recognized the advantages that doing so would prevent use of a fraudulent issued card to 
complete a transaction and use of unauthorized terminal as suggested by Nakamura et al. 

As per claim 41, Rikuna discloses a method to control card holder verification that can 
be implemented in hardware and software that meets the recitation of an article of manufacture 
comprising at least one computer usable medium having computer readable program code logic 
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to control card holder verification. Claim 41 recites similar limitations as claim 16 except for 
incorporating the claimed method into a computer program. Therefore, claim 41 is rejected on 
the same rationale as the rejection of claim 16. 

As per claims 42, 43, 45, and 46,these claims recite the same limitations as claims 19, 20, 
22, and 25 respectively except for incorporating the claimed method into a computer program. 
Therefore, these claims are rejected on the same rationale as the rejection of claims 19, 20, 22, 
and 25. 

As per claim 47, Rikuna discloses a method to control card holder verification that can 
be implemented in hardware and software that meets the recitation of an article of manufacture 
comprising at least one computer usable medium having computer readable program code logic 
to control card holder verification. Claim 47 recites similar limitations as claim 33 except for 
incorporating the claimed method into a computer program. Therefore, claim 47 is rejected on 
the same rationale as the rejection of claim 33. 

4. Claims 23-24 and 26-27 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
US Patent 4,752,678 to Rikuna in view of US Patent 5,917,168 to Nakamura et al as applied to 
claims 16, 22, and 25 and further in view of US Patent 6,473,500 to Risafi et al. 

As per claim 23, both references disclose the claimed method of claims 16 and 22. 
Rikuna does not explicitly disclose replacing the personal identification number which is a 
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common practice in the art. Risafi et al in an analogous art discloses wherein the card identifier 
is associated with a personal identification number usable in card holder verification and said 
method further comprises replacing the personal identification number with another personal 
identification number (see column 4, lines 17-47). Therefore, it would have been obvious to one 
of ordinary skill in the art at the time the invention was made to modify the method as combined 
above to allow the cardholder to select and change the PIN at any time as taught by Risafi et al 
because it would be advantageous to have the user select a PIN that is easily remembered (see 
column 3, lines 35-44). 

As per claim 24, the references as combined above disclose the claimed method of claim 
22, wherein the card identifier is associated with a personal identification number usable in card 
holder verification, and said method further comprising erasing the association between the card 
identifier and the personal identification number (see Risafi et al, column 4, lines 17-47). 
Therefore, this claim is rejected on the same rationale as the rejection of claim 23 above. 

As per claim 26, the references as combined above disclose the claimed method of claim 
25, wherein the device identifier is associated with a personal identification number usable in 
card holder verification, (see Rikuna column 4, lines 21-27) and said method further comprises 
replacing the personal identification number with another personal identification number (see 
Risafi et al, column 4, lines 17-47). Therefore, this claim is rejected on the same rationale as the 
rejection of claim 23 above. 
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As per claim 27, the references as combined above disclose the claimed method of claim 
25, wherein the device identifier is associated with a personal identification number usable in 
card holder verification (see Rikuna column 4, lines 21-27), and said method further comprising 
erasing the association between the card identifier and the personal identification (see Risafi et 
al, column 4, lines 17-47). Therefore, this claim is rejected on the same rationale as the rejection 
of claim 23 above. 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. The prior art discloses at least two identifiers stored in a card and comparison means 
by either the card or at least one device. See PTO-form 892. 

5.1 Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carl Colin whose telephone number is 571-272-3862. The 
examiner can normally be reached on Monday through Thursday, 8:00-6:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami can be reached on 571-272-4195. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Carl Colin/ 

Patent Examiner, Art Unit 2136 
August 15,2007 



